MAL-2025-141940 Malicious code in elektra-comet-kaus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19e35c748b77d4b457b3cb6602edbd409762762c7000fa53eba59cea78c3b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144452 Malicious code in lint-staged-delphinus-typeorm-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156dbe424c31b0b557485d7425baa456b1b7b461c9d9db75319dda86b377161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143921 Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140828 Malicious code in cluster-ignite-ganymede-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14437d0aefae1e385cdcb8120bc09283f513bed896c77b0dbe800c278ed0f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144506 Malicious code in loglevel-cross-env-exec-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94b7d7cab06bdad4b51a0677f1d821f7d50928c6d6eda557a6e75f8ad54714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139516 Malicious code in apollo-indus-run-script-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df8a1b1d9133a02bce617d02a57717119f238340c6031b6fb83016f37628be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143207 Malicious code in heka-lint-pulsar-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483200965e1cb5ec676a4734db1d2ad6b2ce08a2fc3556fbc9e01870f7831de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139649 Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145880 Malicious code in ora-draco-phoebe-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63832b4a4899690ef5d3ee5392c15aa652aecda02229e57d61d1ec4af43ca880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144255 Malicious code in leda-acamar-sequelize-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d953ff4007470886cb9390d415da40753ccb4bac042bf6d7663fead61bc4797d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144922 Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e85307e2ace34bcc68ec8b976c8a081530bd220b6e82e1316e2bbbbde27006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144323 Malicious code in less-loader-karma-scorpius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143928 Malicious code in jest-mdx-aurora-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b68d4bbf9b461dbf984128d8547052b0cebeff32e91ea0cb65ef648bc2b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143460 Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145994 Malicious code in pavo-changelog-neptune-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3449b5fa815d2cd7d10fb577067748b12802bd77333e8ebf8c7431d5a704632c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140646 Malicious code in chalk-kaus-eslint-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159c0dbbb89b303076efe400413c3f25ca847b455c5b90c4a461c76df3e9ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145412 Malicious code in nextjs-changelog-hexo-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27cddfa256ffba81ecca7c5db6f5e398c8571f671a385fae8b63b009a51e64d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147274 Malicious code in repository-meissa-commitizen-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e26e15537f1f0a2acb7d8e087140912aaeaa25fce5623fe76057bc299a546e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143596 Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145019 Malicious code in miranda-ariel-metalsmith-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edfbaf3006b6027e406e19e8a4d6215add69e23c09a4540decae8c630303be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...